This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: MCwj4AVSbEX3P62V+lno+3GCuX1YX7iOpMVL/dTSx8g= Subject key identifier: B0:3A:71:68:8C:B9:2F:87:E1:76:3A:B9:48:61:8B:4E:6D:AC:2E:28 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 15AF8F7E231D0DE958AC05DC0D21104C57658EED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: D0 Signing time: Fri 19 Dec 2025 02:22:37 +0000 Manifest this update: Fri 19 Dec 2025 02:17:37 +0000 Manifest next update: Mon 22 Dec 2025 03:33:37 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=) 2: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: S3VSnR+eIj8HjyAUNvbF/SelCt0zHIF1tAZXSaNhXIA=) 3: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:af:8f:7e:23:1d:0d:e9:58:ac:05:dc:0d:21:10:4c:57:65:8e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Dec 19 02:17:37 2025 GMT Not After : Dec 22 03:33:37 2025 GMT Subject: CN=B03A71688CB92F87E1763AB948618B4E6DAC2E28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:fd:02:8e:4d:83:57:a8:2c:c9:53:b9:d2: c6:e0:8e:19:9a:33:ff:ae:e1:1b:95:e6:2f:22:3e: d3:67:8b:19:f6:65:9b:9c:01:09:e1:d5:72:85:14: d4:d5:26:97:58:57:b1:15:13:47:67:f2:98:15:89: 1b:3f:f1:d9:11:66:04:28:06:02:e4:df:35:07:41: 15:55:dd:e9:69:42:60:e9:31:47:c8:d7:ce:1e:36: 22:7a:1a:9f:f7:b3:7c:58:f8:7e:a6:b4:8f:46:d0: 0f:53:36:f7:0c:64:68:fc:dc:63:5d:b8:b4:e5:08: ea:20:7b:a0:de:cb:b4:da:13:7c:b1:7f:03:a9:15: 97:fe:2b:3f:88:8c:c9:16:20:22:dd:53:e9:97:9b: bc:8c:76:00:a6:bf:35:03:83:06:63:2f:7c:65:5c: b1:1b:eb:3f:ca:26:18:f6:01:cc:00:21:6e:27:ad: ec:87:b3:ef:2f:d7:06:6c:c0:ac:32:ba:2a:eb:63: 9b:7c:15:00:96:57:f8:1f:12:aa:46:6b:ad:25:36: fd:76:36:6f:d4:f6:16:49:74:c7:18:b8:ea:2e:3a: 16:85:6d:e0:7f:5e:6e:66:98:05:06:20:99:a9:c6: c1:cb:00:76:4e:28:4d:52:43:f6:71:b7:7b:9b:39: a1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3A:71:68:8C:B9:2F:87:E1:76:3A:B9:48:61:8B:4E:6D:AC:2E:28 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f5:60:39:3a:e1:8d:8d:e5:a1:23:9a:3c:b1:05:fa:1d:9d:81: ec:92:c3:8d:c1:31:e9:97:e4:89:82:40:59:26:c4:69:98:05: 9d:b2:44:19:0d:5a:c0:f6:90:3d:3f:8b:e0:ca:9e:f0:38:d5: c8:05:d4:21:9d:65:2e:17:cd:2b:6d:1d:90:64:e5:a1:23:4b: 6e:00:fd:91:8e:ca:be:ac:53:7a:b9:a4:81:0a:da:a9:6f:4f: 3c:01:a4:2f:4f:a6:5d:6d:9a:af:ce:41:7e:83:91:75:50:f2: 3b:3e:1d:13:dd:fc:e7:fd:97:01:f4:98:bc:dd:76:e3:dc:ef: 2e:8d:7f:47:da:38:35:09:b6:98:8b:e3:6e:6d:af:3c:c8:07: 96:67:33:71:e2:b2:3a:79:f1:8b:ca:67:04:da:b9:83:99:fe: e7:61:19:b1:5f:c2:83:79:ff:47:a5:d8:9f:3b:05:7d:56:d1: a1:63:32:df:ca:5b:f4:7c:c1:7b:f5:78:3e:f2:05:6b:45:9f: b9:2a:48:8a:6f:38:bd:44:5d:7e:14:47:3e:bb:5c:02:e2:b9: 63:7f:fd:b9:09:84:e9:1a:72:3e:73:de:58:76:26:5f:73:81: ce:e7:95:d1:16:55:a4:52:d3:6d:30:8a:4c:7c:70:31:31:0f: 31:56:a4:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFa+PfiMdDelYrAXcDSEQTFdlju0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNTEyMTkwMjE3MzdaFw0yNTEyMjIwMzMzMzdaMDMxMTAvBgNV BAMTKEIwM0E3MTY4OENCOTJGODdFMTc2M0FCOTQ4NjE4QjRFNkRBQzJFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYD/0Cjk2DV6gsyVO50sbgjhma M/+u4RuV5i8iPtNnixn2ZZucAQnh1XKFFNTVJpdYV7EVE0dn8pgViRs/8dkRZgQo BgLk3zUHQRVV3elpQmDpMUfI184eNiJ6Gp/3s3xY+H6mtI9G0A9TNvcMZGj83GNd uLTlCOoge6Dey7TaE3yxfwOpFZf+Kz+IjMkWICLdU+mXm7yMdgCmvzUDgwZjL3xl XLEb6z/KJhj2AcwAIW4nreyHs+8v1wZswKwyuirrY5t8FQCWV/gfEqpGa60lNv12 Nm/U9hZJdMcYuOouOhaFbeB/Xm5mmAUGIJmpxsHLAHZOKE1SQ/Zxt3ubOaFLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsDpxaIy5L4fhdjq5SGGLTm2sLigwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPVgOTrhjY3loSOaPLEF+h2dgeySw43BMemX 5ImCQFkmxGmYBZ2yRBkNWsD2kD0/i+DKnvA41cgF1CGdZS4XzSttHZBk5aEjS24A /ZGOyr6sU3q5pIEK2qlvTzwBpC9Ppl1tmq/OQX6DkXVQ8js+HRPd/Of9lwH0mLzd duPc7y6Nf0faODUJtpiL425trzzIB5ZnM3Hisjp58YvKZwTauYOZ/udhGbFfwoN5 /0el2J87BX1W0aFjMt/KW/R8wXv1eD7yBWtFn7kqSIpvOL1EXX4URz67XALiuWN/ /bkJhOkacj5z3lh2Jl9zgc7nldEWVaRS020wikx8cDExDzFWpBI= -----END CERTIFICATE-----Generated at Sun Dec 21 03:05:18 2025 by rpki-client